SAP security advisory – October 2026 monthly rollup (AV26-1030)
Canadian Cyber Centre urges patching after SAP's October 2026 rollup affects multiple products.
On October 13, 2026, the Canadian Centre for Cyber Security published advisory AV26-1030 for SAP's October 2026 Security Patch Day. Listed affected software includes SAP Cloud SDK before 0.45.2, SAP Commerce Cloud COM_CLOUD 2211-JDK21, SAP Manufacturing Integration and Intelligence 15.5 and XMII 15.4, NetWeaver Visual Composer VC70RUNTIME 7.50, multiple NetWeaver and Web Dispatcher kernel versions, and SAP S/4HANA S4CORE 105 through 109. The notice names no CVE identifiers and does not report exploitation. Administrators are urged to review SAP's patch-day guidance and apply available updates.